Vishnu Narayanan c884cdefde feat: add per-account daily rate limit for outbound emails (#13411) ... Introduce a daily cap on non-channel outbound emails to prevent abuse. Fixes https://linear.app/chatwoot/issue/CW-6418/ses-incident-jan-28 ## Type of change - [x] New feature (non-breaking change which adds functionality) - [x] Breaking change (fix or feature that would cause existing functionality not to work as expected) ## Summary - Adds a Redis-based daily counter to rate limit outbound emails per account, preventing email abuse - Covers continuity emails (WebWidget/API), conversation transcripts, and agent notifications - Email channel replies are excluded (paid feature, not abusable) - Adds account suspension check in `ConversationReplyMailer` to block already-queued emails for suspended accounts ## Limit Resolution Hierarchy 1. Per-account override (`account.limits['emails']`) — SuperAdmin configurable 2. Enterprise plan-based (`ACCOUNT_EMAILS_PLAN_LIMITS` InstallationConfig) 3. Global default (`ACCOUNT_EMAILS_LIMIT` InstallationConfig, default: 100) 4. Fallback (`ChatwootApp.max_limit` — effectively unlimited) ## Enforcement Points | Path | Where | Behavior | |------|-------|----------| | WebWidget/API continuity | `SendEmailNotificationService#should_send_email_notification?` | Silently skipped | | Widget transcript | `Widget::ConversationsController#transcript` | Returns 429 | | API transcript | `ConversationsController#transcript` | Returns 429 | | Agent notifications | `Notification::EmailNotificationService#perform` | Silently skipped | | Email channel replies | Not rate limited | Paid feature | | Suspended accounts | `ConversationReplyMailer` | Blocked at mailer level |		2026-02-03 02:06:51 +05:30
..
account	fix: account email validation during signup (#11307)	2025-05-20 20:45:39 -07:00
auto_assignment	feat: Assignment service (v2) (#12320)	2025-11-17 10:08:25 +05:30
automation_rules	fix: country_code should be checked against the contact (#13186)	2026-01-13 14:47:27 +05:30
contacts	feat: Bulk delete for contacts (#12778)	2025-11-04 17:47:53 -08:00
conversations	feat: APIs to assign agents_bots as assignee in conversations (#12836)	2025-11-18 18:20:58 -08:00
crm/leadsquared	test(leadsquared): make ApiError specs reload-safe (#13098)	2025-12-17 13:30:34 -08:00
email	chore: Migrate mailers from the worker to jobs (#12331)	2025-10-21 16:36:37 -07:00
facebook	feat: Add message support for input_select type in Facebook (#11627)	2025-06-10 16:15:11 +05:30
google	feat: add Google Email fetch and OAuth token refresh service (#9603)	2024-06-11 14:22:03 +05:30
imap	feat: Add configurable interval for IMAP sync (#9302)	2024-04-25 18:58:20 -07:00
instagram	feat: Handle instagram test service (#11244)	2025-04-11 19:11:29 +05:30
internal	feat: add job to remove stale contacts and contact_inboxes (#11186)	2025-03-28 12:18:39 +05:30
labels	fix: Update associations when a label is updated (#3046)	2021-09-21 10:16:32 +05:30
line	fix: Ensure messages go to correct conversation when receive multi user in 1 LINE webhook (#12322)	2025-09-22 17:05:25 +05:30
linear	feat: Whatsapp embedded signup (#11612)	2025-07-14 21:37:06 -07:00
liquid	feat: Add liquid processing for SMS campaigns (#10981)	2025-06-11 13:16:44 -04:00
llm_formatter	feat: Differentiate bot and user in the summary (#12801)	2025-11-05 11:42:21 -08:00
macros	feat: Add webhook event support for macros (#11235)	2025-04-02 20:26:55 -07:00
mailbox	refactor: strategy pattern for mailbox conversation finding (#12766)	2025-11-10 20:47:18 +05:30
message_templates	fix: Respect survey label rules for WhatsApp CSAT template (#13285)	2026-01-15 22:16:00 -08:00
messages	feat: add per-account daily rate limit for outbound emails (#13411)	2026-02-03 02:06:51 +05:30
mfa	feat: MFA (#12290)	2025-09-18 20:19:24 +05:30
microsoft	chore: Refactor RefreshOauthTokenService to improve readability (#8820)	2024-01-31 12:24:12 +04:00
notification	chore: Disable email notifications for unconfirmed users (#10964)	2025-02-24 12:14:40 -08:00
sms	fix: Error shouldn't halt the campaign for entire audience (#11980)	2025-08-11 12:03:48 +05:30
telegram	feat: Enable lock to single thread settings for Telegram (#12367)	2025-09-24 11:35:14 +05:30
tiktok	feat: TikTok channel (#12741)	2025-12-17 07:54:50 -08:00
twilio	feat: Add support for sending CSAT surveys via templates (Whatsapp Twilio) (#13143)	2026-01-13 16:32:02 +04:00
twitter	chore: Enable the new Rubocop rules (#7122)	2023-05-19 14:37:10 +05:30
whatsapp	fix: Subscribe app to WABA before overriding webhook callback URL (#13279)	2026-02-02 16:50:35 +05:30
widget	feat: speed up circleci and github actions (#12849)	2025-11-19 15:32:48 +05:30
account_deletion_service_spec.rb	feat: automate account deletion (#11406)	2025-05-23 12:58:13 +05:30
action_service_spec.rb	chore: Add open conversation option (#11828)	2025-07-02 10:01:50 +05:30
base_token_service_spec.rb	feat: MFA (#12290)	2025-09-18 20:19:24 +05:30
csat_survey_service_spec.rb	fix: Respect survey label rules for WhatsApp CSAT template (#13285)	2026-01-15 22:16:00 -08:00
search_service_spec.rb	feat: Advanced Search Backend (#12917)	2026-01-07 15:30:49 +05:30